This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/qQS_F_mT_BWgZgn64x2PrZ0b3x0.roa File: qQS_F_mT_BWgZgn64x2PrZ0b3x0.roa (raw, json) Hash identifier: K0/dXe9UF+Om/KZSB0gVADYHMqhu4p7EFjTPAov2x7s= Subject key identifier: A9:04:BF:17:F9:93:FC:15:A0:66:09:FA:E3:1D:8F:AD:9D:1B:DF:1D Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA3041A358AED8B3712B2F37324E6A Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/qQS_F_mT_BWgZgn64x2PrZ0b3x0.roa Signing time: Fri 02 Jan 2026 08:19:21 +0000 ROA not before: Fri 02 Jan 2026 08:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400175 IP address blocks: 45.141.15.0/24 maxlen: 24 93.177.108.0/24 maxlen: 24 93.177.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:30:41:a3:58:ae:d8:b3:71:2b:2f:37:32:4e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a904bf17f993fc15a06609fae31d8fad9d1bdf1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:48:ee:50:10:81:5f:34:bb:28:54:65:6e:4c: 3f:62:25:52:40:84:78:1a:fa:42:0f:3b:7f:4a:0f: 64:d7:2e:19:da:83:62:d4:b6:16:b6:46:2f:c6:61: 70:a8:a0:2f:57:39:b2:0c:17:ef:0f:ab:cf:59:02: 80:0e:37:28:39:78:cf:15:7a:3a:f7:8e:79:35:d4: a6:13:32:eb:02:de:76:ad:c7:0b:1c:5e:5b:32:4e: d5:70:a4:98:01:f8:4f:0c:0b:1e:da:a2:33:83:fb: 80:1d:6f:e9:3f:8a:8f:c0:0b:c7:fa:89:ba:cc:70: 25:cf:19:c9:41:ac:5c:5f:be:23:31:e3:ea:f2:d9: dd:3f:35:83:c9:1a:22:6c:ed:78:7b:dd:13:9a:f3: 6f:c2:81:95:37:f9:a8:96:77:e3:7a:72:26:dc:77: 4a:4c:88:b2:57:8b:25:f6:a9:78:52:11:75:e1:46: 59:b2:64:b7:f5:64:9c:53:f1:c3:77:fd:5f:78:67: c6:f9:33:b1:91:61:c2:c2:bc:a9:ea:e5:b8:e5:22: c7:b3:d3:26:8d:99:ec:af:70:aa:e3:51:9a:d8:4c: 7e:4b:6a:f3:bd:e0:a2:8f:2b:8a:ef:e1:0b:d9:77: 9f:ac:76:35:3a:97:eb:d8:68:67:90:c3:33:3a:13: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:04:BF:17:F9:93:FC:15:A0:66:09:FA:E3:1D:8F:AD:9D:1B:DF:1D X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/qQS_F_mT_BWgZgn64x2PrZ0b3x0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.15.0/24 93.177.108.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:0e:1c:0b:db:33:c9:a8:2e:09:c9:ba:87:55:20:c7:3d:bb: 12:e5:06:dd:91:df:ae:c1:d1:35:46:15:d9:7b:89:38:94:ab: 89:da:fa:a8:4f:69:dc:42:bf:3f:c1:e6:5d:82:16:df:f3:85: a4:00:c7:ca:51:0b:1d:33:5e:22:8a:f9:d9:fe:f6:6f:52:e8: a2:a4:e4:56:22:49:ac:47:62:7b:85:4f:5a:9c:17:47:f6:7c: d4:05:94:44:17:22:8a:57:4d:5d:8e:2a:f7:73:3d:0e:14:33: 16:34:72:df:9b:c4:c8:7d:31:12:a2:25:73:83:00:4c:c1:ae: 44:ee:83:4e:4e:a0:4f:4e:f7:b6:6a:23:2e:fb:75:0c:77:5a: ed:cf:ff:1a:64:14:ca:8f:74:2c:76:03:6b:53:cc:a7:4f:85: 11:bc:06:52:ba:32:dd:9d:d2:12:53:c0:fd:aa:93:05:d9:a1: 17:59:a1:8d:41:c4:11:07:71:74:38:38:47:d4:2d:00:28:c7: 0b:44:4e:42:3d:75:03:01:6d:12:88:f6:d2:0e:c9:ae:18:3c: 26:8e:41:39:cc:11:ed:36:27:a1:88:ce:d7:fc:95:10:1c:d6: 7d:b3:80:10:84:55:c4:f1:4f:e9:43:fb:77:c2:1e:0c:ce:8f: c9:b5:ce:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yjBBo1iu2LNxKy83Mk5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTA0YmYxN2Y5OTNmYzE1YTA2NjA5ZmFlMzFkOGZhZDlkMWJkZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUjuUBCBXzS7KFRlbkw/YiVSQIR4 GvpCDzt/Sg9k1y4Z2oNi1LYWtkYvxmFwqKAvVzmyDBfvD6vPWQKADjcoOXjPFXo6 9455NdSmEzLrAt52rccLHF5bMk7VcKSYAfhPDAse2qIzg/uAHW/pP4qPwAvH+om6 zHAlzxnJQaxcX74jMePq8tndPzWDyRoibO14e90TmvNvwoGVN/molnfjenIm3HdK TIiyV4sl9ql4UhF14UZZsmS39WScU/HDd/1feGfG+TOxkWHCwryp6uW45SLHs9Mm jZnsr3Cq41Ga2Ex+S2rzveCijyuK7+EL2XefrHY1Opfr2GhnkMMzOhOlXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKkEvxf5k/wVoGYJ+uMdj62dG98dMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvcVFTX0ZfbVRfQldnWmduNjR4MlByWjBiM3gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY0PAwQB XbFsMA0GCSqGSIb3DQEBCwUAA4IBAQCNDhwL2zPJqC4JybqHVSDHPbsS5Qbdkd+u wdE1RhXZe4k4lKuJ2vqoT2ncQr8/weZdghbf84WkAMfKUQsdM14iivnZ/vZvUuii pORWIkmsR2J7hU9anBdH9nzUBZREFyKKV01djir3cz0OFDMWNHLfm8TIfTESoiVz gwBMwa5E7oNOTqBPTve2aiMu+3UMd1rtz/8aZBTKj3QsdgNrU8ynT4URvAZSujLd ndISU8D9qpMF2aEXWaGNQcQRB3F0ODhH1C0AKMcLRE5CPXUDAW0SiPbSDsmuGDwm jkE5zBHtNiehiM7X/JUQHNZ9s4AQhFXE8U/pQ/t3wh4Mzo/Jtc6S -----END CERTIFICATE-----Generated at Mon Jan 19 21:25:29 2026 by rpki-client